Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,334
Reset filtersOut of bounds read in Tensorflow
Out of bounds read in Tensorflow
Out of bounds read in Tensorflow
Infinite Loop in Django
Unsafe handling of user-specified cookies in treq
Cross-site Scripting and Open Redirect in plone.app.contenttypes
Observable Response Discrepancy in Flask-AppBuilder
Server-Side Request Forgery in calibreweb
Incorrect Authorization in calibreweb
Cross-site Scripting and Open Redirect in Products.CMFPlone
Cross-site Scripting and Open Redirect in Products.ATContentTypes
Cross-site Scripting in calibreweb
SSRF vulnerability in jupyter-server-proxy
Improper Privilege Management in apache-airflow
OTF-001: Improper Input Sanitation: The path parameter of the requested URL is not sanitized before being passed to the QT frontend
Denial of Service in Onionshare
Out-of-bounds Read in Onionshare
Comment reply notifications sent to incorrect users
Path Traversal in nemo-toolkit
Pipenv's requirements.txt parsing allows malicious index url in comments
Arbitrary expression injection in Pillow
OS Command Injection in celery
An issue was discovered in split_region in uc.c in Unicorn Engine before 2.0.0-rc5. It allows local attackers to escape the sandbox. An attacker must first obtain the ability to execute crafted code i
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.